Feels like a dream to lose crypto this way, one of the strangest of it's kind.

[Aanuoluwatofunmi]

In the end no one will warn you to stop using your laptops to run and keep your Bitcoin and. Cryptocurrencies, sit back and keep relaxing like nothing is going on, so far 2025 have been a bizarre year for crypto wallets running on PC and smartphones.

More advisably, our phone should be connected bro the Internet, while the PC we have at home for personal use shouldn't be connected to the Internet once we have set up our wallet on it, this is a kind advise we ought to take serious and be patient with, that we see things are in place like this before connecting them all together for use without any differences.

[Outhue]

I don't believe that it's because of the bookmark but the link itself that is bookmarked. The victim wouldn't lost money if the link being bookmarked is real or doesn't contain JavaScript or any malicious malware then the victim's funds wouldn't have been drained if the link is safe. Like what sunsilk explained, I believe that it's the reason why the victim's funds got drained because of it. This is the first time I heard of such thing and since bookmark involves link so I think it's all about the link or whatever the victim bookmarked.

I can't count how many times I have bookmarked the wrong websites only to find out later that they are not the real one but nothing happened to my crypto wallet, maybe that's because I don't always have any assets in the crypto wallet, both Electrum and MetaMask wallet are still running on my PC till today.

I can say that I am one of those who are lucky enough to believe in a hardware wallet than free wallets, I have lost a lot of good valuable assets to bad mistakes and scams in the past, From Litecoin to Dogecoin and to Bitcoin itself, that is enough lesson for me to not fool around with hot wallets that can get drained at any time.

[Faisal2202]

That's a weird part—how will bookmarking become JavaScript itself? You might be talking about bookmarklets, not bookmarking, since when we bookmark a page, it only saves the URL and the name of the page, not the JavaScript from the site.
The other option is to have that Javascript if you downloaded the page that includes all things from the site downloaded locally on your device that you can open itoffline and execute all codes, including the HTML, CSS, images, and Javascripts.

Bookmarking should have nothing to do with compromising our wallet. The one who is a victim from the OP might have been infected already before the hacking happened.

What is the difference between bookmarklets and bookmarking? Sorry I did not know, although I was also curious how a simple bookmarking can cause this because when we are bookmarking we are just copying a url and the name as so far I don't know how many sites I have bookmarked haha and so far I am safe.

I understand the risks on sites with JS, as they can also download resources in our system that we won't even know they are there and can cause us loss.

[Knight Hider]

That's a $200,000 life lesson: do not store $200,000 in a browser wallet.

[BitMaxz]

There is no need to write the same thing that d5000 wrote with different phrasing and to use AI too to do it.

Which one do you think it is the same as d5000 wrote the same, and used paraphrasing and use AI to do it?

All I use is Grammarly, which fixes my grammar, spelling, etc., but not for paraphrasing. It wasn't generated from AI to plagiarize his post, but it automates to correct my post, and to have good use of fluctuations, I don't see similarities to what d5000 said from the 1st page. It would be end up AI-generated if I copy the whole post of d5000 and paraphrased it, but my whole post is came from my mind and those wrong spellings and fluctuations were automatically corrected while writing.

What is the difference between bookmarklets and bookmarking? Sorry I did not know, although I was also curious how a simple bookmarking can cause this because when we are bookmarking we are just copying a url and the name as so far I don't know how many sites I have bookmarked haha and so far I am safe.

I understand the risks on sites with JS, as they can also download resources in our system that we won't even know they are there and can cause us loss.

We have Google; why not try to search the difference between them instead of asking it here?

[barbara44]

Second, if it wasn't a traditional bookmark but a bookmarklet, then it directly would store JavaScript code, which can probably be infected too. It seems that the code is executed indeed when storing it, so this could be the reason. So the advice would be: don't use bookmarklets on computers where you're dealing with crypto.

Bookmarklet? Seems like that I heard a long back. Basically, by not making use of anything in the same device where we are transacting bitcoin by holding a wallet, we can prevent any unexpected events like what OP brought here. It means that we must have a specialised device only for bitcoin wallet, this may sound like not practical but when your each satoshis are going to value more than a dollar, I guess you must consider this.

I guess that many people of this community must have come across this kind of suggestion. And not making use of any mobile devices for holding bitcoin would be another simple precautionary step to avoid such hacking.